Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/040070-64b0-46f8-a360-02206303d713/1/5ZAclsdH6RYsrv5QFArlMhsjxXw.mft
File:                     5ZAclsdH6RYsrv5QFArlMhsjxXw.mft (raw, json)
Hash identifier:          ONTDXuSqYXADUvwqz4k/32SBR4m30rfINn0qLusdo2w=
Subject key identifier:   15:BB:8D:26:6A:AA:B7:61:57:81:CC:FE:B1:13:D9:3D:17:48:12:EB
Authority key identifier: E5:90:1C:96:C7:47:E9:16:2C:AE:FE:50:14:0A:E5:32:1B:23:C5:7C
Certificate issuer:       /CN=e5901c96c747e9162caefe50140ae5321b23c57c
Certificate serial:       01A040BCAECE4597B279B2C35D8782FA3357
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5ZAclsdH6RYsrv5QFArlMhsjxXw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/040070-64b0-46f8-a360-02206303d713/1/5ZAclsdH6RYsrv5QFArlMhsjxXw.mft
Manifest number:          056B
Signing time:             Thu 27 Aug 2026 01:01:42 +0000
Manifest this update:     Thu 27 Aug 2026 01:01:42 +0000
Manifest next update:     Fri 28 Aug 2026 01:01:42 +0000
Files and hashes:         1: 5ZAclsdH6RYsrv5QFArlMhsjxXw.crl (hash: GcT4ksLBUgFi0epUUUtvb5UxE5DhOx7Z4659D3IpeW4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/040070-64b0-46f8-a360-02206303d713/1/5ZAclsdH6RYsrv5QFArlMhsjxXw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/040070-64b0-46f8-a360-02206303d713/1/5ZAclsdH6RYsrv5QFArlMhsjxXw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5ZAclsdH6RYsrv5QFArlMhsjxXw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 23:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:40:bc:ae:ce:45:97:b2:79:b2:c3:5d:87:82:fa:33:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5901c96c747e9162caefe50140ae5321b23c57c
        Validity
            Not Before: Aug 27 01:01:42 2026 GMT
            Not After : Aug 28 01:01:42 2026 GMT
        Subject: CN=15bb8d266aaab7615781ccfeb113d93d174812eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:24:3d:f9:ab:87:b0:c3:c9:2c:31:7b:d6:0f:
                    4c:af:cb:9a:4e:33:43:fb:c3:d4:1e:a9:53:6d:93:
                    86:c3:19:75:8d:8c:71:85:59:95:c5:d0:1d:27:27:
                    53:45:66:c3:a3:fc:06:d0:a0:f9:1c:61:8f:be:88:
                    96:2d:90:7d:3d:a9:5c:fb:56:6b:18:2c:99:41:0e:
                    7d:6d:25:7b:f5:fd:fd:ec:c2:d0:d2:fe:db:29:d8:
                    3d:89:e1:9a:eb:85:36:46:9f:73:77:d8:2f:ba:fc:
                    a4:76:fd:d9:81:84:98:81:aa:ba:99:17:0b:93:ec:
                    70:0f:f7:f1:56:45:52:09:f7:97:59:7d:6f:a7:47:
                    f7:70:bb:be:51:2c:3a:18:a6:02:6a:ce:57:52:90:
                    af:84:9e:1d:70:31:0a:c5:77:8f:d9:2b:91:da:d0:
                    2f:5f:e1:7e:42:7f:62:9c:2b:4e:96:29:91:51:a9:
                    52:88:82:76:bb:c5:1f:b9:e0:34:4f:ec:06:d3:32:
                    12:38:2c:fd:c5:37:96:d8:34:b4:6c:de:40:70:c7:
                    9d:21:92:76:90:e6:dd:06:bb:16:03:ee:b3:f2:db:
                    79:bb:bd:f8:34:16:46:a7:c2:6d:68:51:84:b1:ec:
                    8a:e6:46:54:27:2f:cc:fe:76:14:12:6b:aa:c3:e4:
                    09:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:BB:8D:26:6A:AA:B7:61:57:81:CC:FE:B1:13:D9:3D:17:48:12:EB
            X509v3 Authority Key Identifier:
                keyid:E5:90:1C:96:C7:47:E9:16:2C:AE:FE:50:14:0A:E5:32:1B:23:C5:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ZAclsdH6RYsrv5QFArlMhsjxXw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/040070-64b0-46f8-a360-02206303d713/1/5ZAclsdH6RYsrv5QFArlMhsjxXw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/040070-64b0-46f8-a360-02206303d713/1/5ZAclsdH6RYsrv5QFArlMhsjxXw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:d2:d8:cd:95:ca:09:44:62:1d:5b:b2:5e:aa:5f:ca:18:59:
         37:53:ae:83:dc:88:b0:13:eb:b9:4d:66:88:8d:49:33:ff:34:
         66:df:e4:09:af:e9:c1:d6:bc:2a:e1:5a:d5:e5:e0:02:b6:6a:
         09:ec:8a:16:92:0c:30:82:e6:6c:ad:f8:35:36:a6:e4:50:ba:
         28:c8:14:8c:93:28:c5:07:00:e4:3a:b9:6f:1b:1a:fc:0b:76:
         9a:9b:00:94:2b:77:61:23:de:c8:47:ae:98:99:53:62:c8:dc:
         b4:88:30:30:68:9e:cb:96:49:54:00:38:26:58:04:cb:7e:0a:
         78:8c:c1:fb:4c:41:a6:e1:90:3a:8f:0c:91:80:4e:c4:98:01:
         9d:49:63:44:aa:fe:7f:45:f5:7b:ca:88:18:03:04:a9:2e:3c:
         44:d4:bc:31:aa:69:8c:d8:14:ce:b0:b4:aa:a8:57:d7:5e:01:
         6f:e8:6e:b5:2e:62:54:5f:ca:fa:b0:8b:2e:bf:19:a0:c1:66:
         97:b3:ab:bc:c4:d8:66:ed:ed:dd:8d:bf:3b:49:68:52:5c:dc:
         5a:cf:25:09:b1:02:dd:c4:9a:aa:2f:38:ac:6c:9b:6b:3f:8e:
         92:a7:8a:62:c6:36:8a:16:7e:4d:41:5d:29:ee:f4:07:e1:57:
         27:8b:b8:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:25:48 2026 by rpki-client